> For the complete documentation index, see [llms.txt](https://riteshs4hu.gitbook.io/infosec-notes/llms.txt). Markdown versions of documentation pages are available by appending `.md` to page URLs; this page is available as [Markdown](https://riteshs4hu.gitbook.io/infosec-notes/internal-and-external-network-sec/enumeration/web-enumeration/tools/cms/cmseek.md).

# CMSeeK

`CMSeeK` is an open-source CMS detection and vulnerability scanner. It can identify 100+ CMS platforms, detect their versions, enumerate plugins/themes/modules, and check for known vulnerabilities. It's a useful tool during reconnaissance and enumeration phases of web pentesting.

***

#### 🛠Installation

**Install via APT (Kali or Parrot OS):**

```bash
sudo apt update
sudo apt install cmseek
```

**Manual Installation (if not available via APT):**

```bash
git clone https://github.com/Tuhinshubhra/CMSeeK
cd CMSeeK
chmod +x cmseek.py
sudo ln -s $(pwd)/cmseek.py /usr/bin/cmseek
```

Now you can use it as:

```bash
cmseek
```

***

#### Syntax

```bash
cmseek [OPTIONS]
```

***

#### Examples

* **Basic CMS detection of a single target**

```bash
cmseek -u http://example.com
```

* **Scan multiple targets from a file**

```bash
cmseek -l targets.txt
```

* **Light scan (CMS & version detection only, no deep scan)**

```bash
cmseek -u http://example.com --light-scan
```

* **Only detect CMS, skip version and deep scan**

```bash
cmseek -u http://example.com -o
```

* **Ignore specific CMS IDs (e.g., WordPress, Joomla)**

```bash
cmseek -u http://example.com -i wordpress,joomla
```

* **Strict CMS check (only check against specific CMS types)**

```bash
cmseek -u http://example.com --strict-cms wordpress,drupal
```

* **Follow all redirects**

```bash
cmseek -u http://example.com --follow-redirect
```

* **Skip all redirects**

```bash
cmseek -u http://example.com --no-redirect
```

* **Use a random user-agent**

```bash
cmseek -u http://example.com -r
```

* **Use Googlebot user-agent**

```bash
cmseek -u http://example.com --googlebot
```

* **Specify a custom user-agent**

```bash
cmseek -u http://example.com --user-agent "Mozilla/5.0 Custom"
```

* **Enable verbose output**

```bash
cmseek -u http://example.com -v
```

* **Clear previous scan results**

```bash
cmseek --clear-result
```

* **Run without prompts (for batch scanning multiple targets)**

```bash
cmseek -l targets.txt --batch
```